General
- Target 2026-08-07_6ceb93254b6aaab4df7b032fcdabfcb8_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 6.9MB
- Sample260808-bk4sbaxbna
- SHA256 66b07cf8ea87a83620df4af3fa7915031e781dba8509388c486d25460f291524
- MD5 6ceb93254b6aaab4df7b032fcdabfcb8
- SHA1 9ab3e133a55529c619b22087265c4cbd33d7683e
- SHA512 6c4df4b4754b144a0df9ad7d7cdd33efbaf20b8609102b530b06698cc18d69c99a78137f59e5e88652e2f1b7ecb624881e1b54192f03171746ceacd7e482b9e9
- SSDEEP 49152:fkYw9sgydB3ImIR8ILfUdcY/9k9akOElMaFLkMKeW4SkZP4sz9MbqT3S9tsgX8zM:fMsgWCmIiYL9ak7QfkZcqTIOSAq
- TLSH T1C7766D1277FD8633D87942398B78996852713D259B72CA8F31407E9EEDB3385492B323
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_6ceb93254b6aaab4df7b032fcdabfcb8_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_luca.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_6ceb93254b6aaab4df7b032fcdabfcb8_amadey_darkgate_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader
- Size 6.9MB
- SHA256 66b07cf8ea87a83620df4af3fa7915031e781dba8509388c486d25460f291524
- MD5 6ceb93254b6aaab4df7b032fcdabfcb8
- SHA1 9ab3e133a55529c619b22087265c4cbd33d7683e
- SHA512 6c4df4b4754b144a0df9ad7d7cdd33efbaf20b8609102b530b06698cc18d69c99a78137f59e5e88652e2f1b7ecb624881e1b54192f03171746ceacd7e482b9e9
- SSDEEP 49152:fkYw9sgydB3ImIR8ILfUdcY/9k9akOElMaFLkMKeW4SkZP4sz9MbqT3S9tsgX8zM:fMsgWCmIiYL9ak7QfkZcqTIOSAq
- TLSH T1C7766D1277FD8633D87942398B78996852713D259B72CA8F31407E9EEDB3385492B323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory